1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191

name: Claude Code on Issue

on:
  issues:
    types: [labeled]
  issue_comment:
    types: [created]

jobs:
  claude-work:
    # リポジトリオーナーのみ実行可能
    if: >-
      (
        github.event_name == 'issues' &&
        contains(github.event.issue.labels.*.name, 'claude') &&
        github.event.issue.user.login == github.repository_owner
      ) || (
        github.event_name == 'issue_comment' &&
        github.event.comment.user.login == github.repository_owner &&
        (startsWith(github.event.comment.body, '/claude') || startsWith(github.event.comment.body, '/approve'))
      )
    runs-on: self-hosted
    permissions:
      contents: write
      issues: write
      pull-requests: write

    steps:
      - uses: actions/checkout@v4

      - name: Detect user home
        id: env
        run: |
          echo "home=$(eval echo ~$(whoami))" >> "$GITHUB_OUTPUT"

      - name: Determine mode
        id: mode
        uses: actions/github-script@v7
        with:
          script: |
            const event = context.eventName;
            let mode = 'investigate';

            if (event === 'issue_comment') {
              const body = context.payload.comment.body.trim();

              if (body.startsWith('/approve')) {
                const labels = context.payload.issue.labels.map(l => l.name);
                if (!labels.includes('承認待ち')) {
                  core.setFailed('承認待ちラベルがありません。先に /claude で調査を実行してください。');
                  return;
                }
                mode = 'execute';
              } else if (body.startsWith('/claude')) {
                const args = body.replace('/claude', '').trim();
                if (args === '--execute') {
                  mode = 'execute';
                } else {
                  mode = 'investigate';
                }
              }
            } else {
              mode = 'investigate';
            }

            core.setOutput('mode', mode);
            console.log(`Mode: ${mode}`);

      - name: Build prompt
        id: prompt
        uses: actions/github-script@v7
        with:
          script: |
            const issue = context.payload.issue;
            const mode = '${{ steps.mode.outputs.mode }}';
            let prompt = `GitHub Issue #${issue.number}: ${issue.title}\n\n${issue.body}`;

            if (context.eventName === 'issue_comment') {
              const comment = context.payload.comment.body.trim();
              let instruction = '';

              if (comment.startsWith('/approve')) {
                instruction = comment.replace('/approve', '').trim();
                const comments = await github.rest.issues.listComments({
                  owner: context.repo.owner,
                  repo: context.repo.repo,
                  issue_number: issue.number,
                });
                const planComment = comments.data
                  .reverse()
                  .find(c => c.body.includes('Claude Code 調査結果'));
                if (planComment) {
                  prompt += `\n\n## 承認済み計画\n\n${planComment.body}`;
                }
              } else {
                instruction = comment.replace('/claude', '').replace('--execute', '').trim();
              }

              if (instruction) {
                prompt += `\n\n追加指示: ${instruction}`;
              }
            }

            if (mode === 'investigate') {
              prompt += '\n\n## 指示\n';
              prompt += '読み取り専用モードです。コードの調査と分析のみ行ってください。\n';
              prompt += '以下を出力してください:\n';
              prompt += '1. 問題の分析結果\n';
              prompt += '2. 変更が必要なファイルの一覧\n';
              prompt += '3. 実行予定の変更内容\n';
              prompt += '4. 作成予定の PR の概要\n';
            } else {
              prompt += '\n\n## 指示\n';
              prompt += '書き込み許可モードです。計画に基づきファイル変更・コミット・PR 作成を実行してください。\n';
              prompt += '作業が完了したら結果のサマリを出力してください。\n';
            }

            const fs = require('fs');
            fs.writeFileSync('/tmp/claude-prompt.txt', prompt);

      - name: Run Claude Code
        env:
          CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
          HOME: ${{ steps.env.outputs.home }}
          PATH: ${{ steps.env.outputs.home }}/.local/bin:/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin
        run: |
          MODE="${{ steps.mode.outputs.mode }}"

          if [ "$MODE" = "investigate" ]; then
            TOOLS="Read,Glob,Grep"
          else
            TOOLS="Bash,Read,Write,Edit,Glob,Grep"
          fi

          claude -p "$(cat /tmp/claude-prompt.txt)" \
            --allowedTools "$TOOLS" \
            --output-format json > /tmp/claude-result.json 2>/tmp/claude-stderr.log || {
              echo "Claude Code failed. Stderr:"
              cat /tmp/claude-stderr.log 2>/dev/null
              echo "Stdout:"
              cat /tmp/claude-result.json 2>/dev/null || echo "(no output file)"
              exit 1
            }

      - name: Post result to issue
        uses: actions/github-script@v7
        with:
          script: |
            const fs = require('fs');
            const mode = '${{ steps.mode.outputs.mode }}';
            const raw = fs.readFileSync('/tmp/claude-result.json', 'utf8');
            const result = JSON.parse(raw);
            const body = result.result || result.text || JSON.stringify(result, null, 2);

            const header = mode === 'investigate'
              ? '## Claude Code 調査結果'
              : '## Claude Code 実行結果';
            const footer = '---\n🤖 自動実行 by Claude Code (self-hosted runner)';

            await github.rest.issues.createComment({
              owner: context.repo.owner,
              repo: context.repo.repo,
              issue_number: context.payload.issue.number,
              body: `${header}\n\n${body}\n\n${footer}`
            });

            if (mode === 'investigate') {
              try {
                await github.rest.issues.addLabels({
                  owner: context.repo.owner,
                  repo: context.repo.repo,
                  issue_number: context.payload.issue.number,
                  labels: ['承認待ち']
                });
              } catch (e) {
                console.log(`ラベル付与エラー: ${e.message}`);
              }
            }

            if (mode === 'execute') {
              try {
                await github.rest.issues.removeLabel({
                  owner: context.repo.owner,
                  repo: context.repo.repo,
                  issue_number: context.payload.issue.number,
                  name: '承認待ち'
                });
              } catch (e) {
                console.log(`ラベル除去エラー: ${e.message}`);
              }
            }

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

name: Claude Code Health Check

on:
  schedule:
    - cron: '0 9 1 * *'  # 毎月1日 9:00 UTC

jobs:
  check:
    runs-on: self-hosted
    steps:
      - name: Detect user home
        id: env
        run: echo "home=$(eval echo ~$(whoami))" >> "$GITHUB_OUTPUT"

      - name: Check Claude Code auth
        env:
          CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
          HOME: ${{ steps.env.outputs.home }}
          PATH: ${{ steps.env.outputs.home }}/.local/bin:/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin
        run: |
          result=$(claude -p "Reply with only: OK" --output-format json 2>/dev/null)
          if echo "$result" | grep -q '"is_error":true'; then
            echo "::error::Claude Code 認証エラー — CLAUDE_CODE_OAUTH_TOKEN の更新が必要です"
            echo "更新手順: claude setup-token を実行し、gh secret set CLAUDE_CODE_OAUTH_TOKEN で登録"
            exit 1
          fi
          echo "Claude Code 認証OK"